Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-32325)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in the searchOwnerUserName parameter in the FilterPickerPopup.jspa resource in...

CVE-2019-14996: Improper Neutralization of Input During Web Page Generation

The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

PT-2019-13922

Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.7 Jira versions 8.0.0 through 8.3.2 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter. This occurs...

XSS in FilterPickerPopup.jspa parameter searchOwnerUserName

h3. Issue Summary The following vulnerability was submitted to our bug bounty program: h3. Environment Jira Server 8.2.1 Jira Cloud Verified using the latest Firefox h3. Steps to Reproduce As an authenticated user, navigate to code:java...

CVE-2019-3402

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

CVE-2019-3402: Improper Neutralization of Input During Web Page Generation

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

PT-2019-16559

Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.3 Jira versions 8.0.0 through 8.1.0 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter. This occurs...